.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
99 percent of lawyers give the rest a bad name.
On Mon, 18 Nov 2019 17:23:43 +0100 Matus UHLAR - fantomas
wrote:
seems something is wrong with your (or maybe their) reverse DNS
resolution...
On Mon, 18 Nov 2019, siefke_lis...@web.de wrote:
This is what I had:
[siefke@sisi-dell ~]$ nslookup 195.128.103.214
214.103.128.195.in-addr.arpa
ossible spam and send them to spam folder, it's
completely up to you. Just note that people with too many spams in spam folder
may start ignoring it and complain...
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this addre
.
office.denic.de.3480IN A 81.91.160.182
seems something is wrong with your (or maybe their) reverse DNS
resolution...
however that's temporary error (4xx) and the client should try again.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
RFC point of view.
If you use it for this, you'll end up rejecting legitimate emails.
this can happen anytime anyone rejects any e-mail.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto
art
of my smtpd_recipient_restrictions. I want to change that to use
my secret key, but I can't seem to find a way to map the server
name to something else (to hide the key).
On Mon, 18 Nov 2019, Matus UHLAR - fantomas wrote:
What's the point of using spamhaus in smtpd_recipient_restrictions
whe
can't seem to be able to
make sense of it :-?
How can I configure postfix to do like postscreen_dnsbl_reply_map but
for smtpd?
What's the point of using spamhaus in smtpd_recipient_restrictions
when you have already done so in postscreen?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.f
tmaster so they could receive mail from blacklisted sites
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Enter any 12-digit prime number to continue.
only requires
ehlo.example to resolve. It's even weaker requirement and has FPs too, but
I consider this one just enough
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOST
the mail.
what reason are they refesed with? You can whitelist their IP ranges
locally or use DNS whitelists that contain their IPs
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu
You call it from e.g. procmail, or in other words it expects a mail
message on STDIN and writes it back out with changes on STDOUT. It
makes a bunch of DNS queries. It adds a bunch of headers; it's up to
you to do with them as you wish.
why not spamassassin instead?
--
Matus UHLAR - fa
fails)
or reject_unknown_reverse_client_hostname (IP has no reverse DNS, no matter
if it points back).
mail.namase.de is the HELO (EHLO) name. You must not reject mail when helo
name differs from DNS name (RFC violation).
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk
suspicious mail in this manner rather than
released by postmaster.
this looks like a job for spam filter, not opendmarc.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem
be very carefull
here.
Still, it certainly can’t hurt.
I'm afraid it won't even help much - seems that dictionary attacks work much
slower.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
=1 rcpt=0/1 quit=1 commands=5/6
Nov 2 15:08:07 stl-mx postfix/smtpd[3017]: disconnect from
keeper-us-east-1b.mxtoolbox.com[52.55.244.91] ehlo=1 mail=1 rcpt=0/1
quit=1 commands=3/4
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I feel like I'm diagonally parked in a parallel universe.
ns that the dns server failed to find out whether the domain
exists.
it's a DNS problem.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"
set wrong.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Two words: Windows survives." - Craig Mundie, Microsoft senior
s (e.g. postscreen).
On 02.10.19 14:12, ratatouille wrote:
I use both, postscreen and postgrey.
with postscreen, postgrey is in fact obsolete.
I got rid of it, since of too many false positives related to outlook, gmail
etc.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
W
to override globals.
Also, smtp_tls* is unneeded in smtpd config, since it's related to smtp
client. And, you probably don't authenticate to others using your
certificate, so it's apparently useless too.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e
On Sep 30, 2019, at 5:29 AM, Matus UHLAR - fantomas wrote:
rarely someone notices they are different.
On 30.09.19 08:05, @lbutlr wrote:
And often there are perfectly legitimate reasons for them to be different.
yes, but this thread is AFAIK about spoofing local addresses.
--
Matus UHLAR
look at header "From:"
rarely someone notices they are different.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux IS user friendl
to check, though.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Boost your system's speed by 500% - DEL C:\WINDOWS\*.*
.
either requires outgoing mail to be processes with procmail, which is not
done by default.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu
d comment
the first one?
you should follow the document
http://www.postfix.org/POSTSCREEN_README.html
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu
users will NOT send accounts that to not exist.
you really should follow Victor's advice, so you next problem won't be
"my mail is being lost" or similar.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this addr
> On 24.09.19 12:11, Paul van der Vlis wrote:
> >I am using now much of your setting and it seems to help. Thanks a lot!
On Tue, 24 Sep 2019 at 11:31, Matus UHLAR - fantomas
wrote:
> I would just like to note that all those reject_rbl_client directives are
> prone to errors wh
On 24.09.19 12:11, Paul van der Vlis wrote:
>I am using now much of your setting and it seems to help. Thanks a lot!
On Tue, 24 Sep 2019 at 11:31, Matus UHLAR - fantomas
wrote:
I would just like to note that all those reject_rbl_client directives are
prone to errors when any of th
reject_rbl_client bl.fmb.la=127.0.0.2
reject_rbl_client b.barracudacentral.org
--
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
with refusing spam scoring over 10
(maybe less, I put it down to 8 after I train it properly).
As you can see, I am experimenting with reject_unknown_client_hostname.
What's your opinion about that setting?
good idea, but you may want whitelist (exemption) for this.
--
Matus UHLAR - fantomas, uh
nks above.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
On Sat, 2019-09-21 at 16:13 +0200, Matus UHLAR - fantomas wrote:
with letsencrypt (and most other certificate authorities), servers need to
provide intermediate certificate in addition to their own cert.
postfix does not have separate configuration directive for CA chain file (as
apache
ain file(s) to certificate file provided with smtpd_tls_cert_file or
smtpd_tls_chain_files (since 3.4).
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
/mail with message
"Invalid HELO name (See RFC2821 4.1.1.1)"
I recommend you reading RFC2821, section 4.1.1.1
and comparing your hostname, if it matches requirements.
Maybe providing your HELO name would help:
postconf smtp_helo_name
postcong -x smtp_helo_name
--
Matus UHLAR - fa
I have tried both
adamt...@foo.com relay:[smtp.foo.com]
and
relay:[smtp.foo.com]
as the the output of the ldap lookup and i just get
status=deferred (mail transport unavailable) error
any other error in logs? IS the smtp.foo.com reachable?
--
Matus UHLAR - fantomas, uh...@fantomas.sk
a écrit :
Fetchmail?
On 18.09.19 14:19, Erwan David wrote:
Fetchmail looses informations, UUCP would be more fitted to this task
(no need to separate malboxes upstream).
Le 18/09/2019 à 14:44, Matus UHLAR - fantomas a écrit :
which information does it lose?
On 18.09.19 14:53, Erwan David wrote
Matus UHLAR - fantomas:
another option is to use amavisd-milter instead of SMTP proxy.
It also allows using other milters, while you can't use multiple proxies.
On 18.09.19 07:05, Wietse Venema wrote:
SMTP-based content filters can be combined:
as I understand, OP wants pre-queue filtering
playing with DNS.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol.
ts and duplicate deliveries as the client retries.
another option is to use amavisd-milter instead of SMTP proxy.
It also allows using other milters, while you can't use multiple proxies.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advert
is a workaround to the defective design you
use.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to
pointing to CNAME etc.
The first can be done in postfix by using check_sender_mx_access, for the
latter you need using something like rfc-clueless blacklist.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address
use SRS when forwarding mail. look for postsrsd or postforward --
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Despite the cost of living
0
http://support.digitalwest.net/KB/a163/550-spf-not-allowed-to-send-mail.aspx
(in reply to RCPT TO command))
Is my only option here to do something like SRS or can this be fixed
another way?
use SRS when forwarding mail. look for postsrsd or postforward
--
Matus UHLAR - fantomas, uh...@fantomas.sk
le to 8bit.
Both is legal in sense of SMTP RFCs, and ignoring this is imho major design
flaw of DKIM.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek rekl
, to the SPAM folder
no-matter-what.
the best solution for this is to configure sender protection via spf/dkim
records, and when possible, using IP addresses not listed in any blacklists.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
there
I checked Linux Distributions I have access to:
- Arch Linux uses submissions
- Scientific Linux 7.6 uses smtps (alias)
- Ubuntu 16.04.6, 18.04.3 uses smtps,ssmtp (alias)
- Ubuntu 19.04 uses submissions and ssmtp,smtps (alias)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
?
(even no response messages appear in the inbox).
that may be a spam filter, messages too ahead get some score.
But that's outside of postfix scope.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
address that is has CNAME record in
DNS, e.g. "gmail.example. CNAME gmail.com."
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu p
?
do you want everyone to drop or reject mail just because of some temporary
problems?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu
On 22.08.19 09:47, Matus UHLAR - fantomas wrote:
I have upgraded debian 8 (postfix 2.11) to debian 9 (postfix 3.1) on a
mailserver.
Now, whenever user who has utf-8 character in /etc/passwd as part of their
username, has to receive mail, postfix outputs:
451 4.3.5 Server configuration error
characters in their fullnames there.
changing smtputf8_autodetect_classes to all didn't seem to help.
What to configure (and how) to avoid this error?
I have LANG variable set to "C" because other values tend do change sorting
etc.
--
Matus UHLAR - fantomas, uh...@fantomas
On 22.08.19 15:02, Eliza wrote:
will postfix get JMAP compatible in future?
see: https://jmap.io/
I strongly doubt. Postfix is a MTA and it's sedigned to accept and receive
e-mail.
JMAP is outside of this scope, different services are to be used for JMAP.
--
Matus UHLAR - fantomas, uh
.
and, since this is not postfix issue, this should be all said about that.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
LSD will make your ECS
ically random if they'll
get rejected.
If you use reject_unknown_client_hostname be prepared to maintain a
whitelist.
or get the bank to fix it. One rarely needs multiple PTR records.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive
On 09.08.19 11:56, Enrico Morelli wrote:
I'll try to put
postrotate
/usr/lib/rsyslog/rsyslog-rotate
endscript
in my postfix logrotate script to see if it works.
don't. Simply look what's in /etc/logrotate.d/*syslog*
it should contain /var/log/mail. files
--
Matus UHLAR
when they are rotated.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I wonder how much deeper the ocean would be without sponges.
On 07.08.19 17:30, Fazzina, Angelo wrote:
I changed it to
relayhost = [massmail.uconn.edu]:587
smtp_fallback_relay = [massmail.uconn.edu]:587
this is superflous, smtp_fallback_relay makes sense when it's different from
relahost.
--
Matus UHLAR - fantomas, uh...@fantomas.sk
believe you can reject at RCPT to stage, if milter says so.
-Original Message-
From: owner-postfix-us...@postfix.org On
Behalf Of Matus UHLAR - fantomas
Sent: 30 July 2019 12:46
To: postfix-users@postfix.org
Subject: Re: combine a milter and a before-queue content filter
** This message
should be
rejected?
if you are asking about smtp proxy, better don't use that. Milter often
won't indicate that since it won't see most of the message.
you can use two milters instead.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail
dovecot has different postfix SASL integration manual)
btw seems your login/pasword appear in the de
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek
l keep the workaround, it'll make it K9 proofed for my users and won't
change much for others.
maybe sending bugreport is worth trying:
https://github.com/k9mail/k-9/issues
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail adver
, on a Debian 8.6 (procedure that I had
for the last time set up in June 2016). So can be obsolete for sure, there
must be something that has changed but that escapes me totally
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
On 23 July 2019 14:25:54 BST, Matus UHLAR - fantomas wrote:
On 23.07.19 13:27, Jean wrote:
The closest thread I could find for this is almost 10 years old:
http://postfix.1071664.n5.nabble.com/Customize-configure-postfix-with-multiple-recipients-td45030.html#a45035
From that thread, my
st to be handled as body?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The early bird may get the worm, but the second mouse gets the cheese.
that domain was provided by sending agent.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I just got lost in thought. It was unfamiliar
019 um 13:40 Uhr schrieb Matus UHLAR - fantomas <
uh...@fantomas.sk>:
On 18.07.19 13:35, Stefan Bauer wrote:
>header_checks = regexp:/etc/postfix/headerstring
>/^Subject: .*\[cleartext\].*/ FILTER cleartext:
>
>And now, there is the following mail-Subject, that did not trigger th
=84Noch_keine_55_und_ab_in_die_GKV=93?=
"cleartext" vs. "Cleartext" looks like case sensitivity problem.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVA
in
restrictions lists, but only
smtpd_reject_unlisted_recipient seems to be "yea" by default, so you don't
receive mail for non-existing recipients.
otherwise, everything seems to be enabled.
chech http://www.postfix.org/postconf.5.html for more info.
--
Matus UHLAR - fa
on context and time.
The default is to allow all connection requests.
some other directives have the same comment.
most of them are empty by default iirc.
is no value is given, afaik the default is permit.
That's why the default value of smtpd_relay_restrictions is not empty by
edfault
--
M
I prefer not to copy files across (often copies or creates misconfigured
mess). I prefer configuring new server feom scratch, looking at old server
configuration.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varo
postfix.
However, only process 2142 seems to be related to the mail you are
receiving.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Spam
On 28.06.19 06:01, @lbutlr wrote:
root 23945 0.0 0.3 31560 10908 - Ss Sun14 0:14.52
/usr/local/sbin/spamass-milter -f -p /var/run/spamass-milter.sock -u spamd -e
-i 65.121.55.40/29 -i 127.0.0.1 -r 10
On Jun 28, 2019, at 6:42 AM, Matus UHLAR - fantomas wrote:
doesn't -e
>My question now is: What is the correct/expected behaviour in such a
>situation?
On Fri, Jun 28, 2019 at 10:26:20AM +0200, Matus UHLAR - fantomas wrote:
You apparently should use SRS when forwarding mail. That will change sender
to your domain so the mail will pass SPF and
On Jun 28, 2019, at 2:22 AM, Matus UHLAR - fantomas wrote:
On 27.06.19 11:57, @lbutlr wrote:
Possibly it is an 11.2 issue then.
check sa-milter RC script. doesn't it redefine reject score on commandline
somewhere?
It does, it just doesn’t actually reject the mail. In facts, in behaves
stination(s), so sending a NDR to the sender seems legit.
Are there proper ways/configurations to deal with this situation?
thanks!
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu ch
quot;
spamass_milter_socket_owner="postfix"
spamass_milter_localflags="-u spamd -e -i 65.121.55.40/29 -i 127.0.0.1 -r 10 “
ps axuww|grep spamass-milter
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this add
On 24.06.19 21:42, Stefan Bauer wrote:
>we're publishing lookup tables through our control git repo but hashing all
>tables before commiting them to git is cumbersome. What do you recommend?
Am Di., 25. Juni 2019 um 13:34 Uhr schrieb Matus UHLAR - fantomas <
uh...@fantomas.sk>:
Matus UHLAR - fantomas skrev den 2019-06-25 13:34:
I'm aware of http://www.postfix.org/DATABASE_README.html#types
but none of them look simple. we like it plain and simple. No db
or ldap or
another instance, that could go wild.
Whate do you recommend?
you can try rbldnsd
/sender_access.pcre
/@name.of.host/ OK
This did not work. I also tried putting that into the check_helo_access file,
/name.of.host/ OK
do you really need pcre?
simple check_helo_access and check_sender_access should be able to reject
"name.of.host" or ".domain.of.host" etc
--
Matus
, that could go wild.
Whate do you recommend?
you can try rbldnsd and reject_rhsbl_client.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu
date
some certificates (which I will worry about later).
have you tried to enforce tls1.3? Lower TLS version should be negotiated if
1.3 negiotiation doesn't succeed.
What are your tls-related options?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to rece
Am 22.06.19 um 02:49 schrieb Rich Wales:
Any other suggestions?
On 22.06.19 14:43, A. Schulze wrote:
I'm still using greylisting with moderate effects. It catches some percent
other AntiSpam technics doesn't
even compared to postscreen?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
it has to be installed unless OP's
system is horribly broken.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Boost your system's speed
ot;250 2.1.5 OK w9si551343wmd.47 - gsmtp"
is a protocol error?
https://tools.ietf.org/html/rfc3463
says about the extended code 2.1.5:
2.XXX.XXX Success
X.1.5 Destination address valid
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receiv
it.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Posli tento mail 100 svojim znamim - nech vidia aky si idiot
Send this email to 100 your
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphil
configuration telling it not
to prompt clients for credentials? How would I go about fixing it?
you should try and fix SASL authentication.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto
n_name=ORIGINATING
and this looks like your mail client did not authenticate to postfix.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
If
il config. These need
not be in main.cf or master.cf (which you've not posted).
You've exhausted all the help this list can provide, good luck.
On 07.06.19 09:22, Matus UHLAR - fantomas wrote:
I guess it's because the "-x" command to spamass-milter.
spamass-milter uses it to find
ou need to do it on another level,
not on postfix level.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"One World. One Web. One Program."
option, if it helps finding
real recipient of messages and using their personal spamassassin configs.
It seems that with postfix this is not an option.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na t
er.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akuk
account and use it for relaying mail through
postfix.
but the option I gave you above is better. If eomeone can fake your
mailserver's address, you should move it elsewhere.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
authentication and what you require is not what
you want to achieve.
I would not like to setup users/mailboxes on the relay server, all are
users are on the exchange server (AD), and postfix is are simple relay
server we would like to secure.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
.
the same applies to smtpd_sasl_security_options.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
One OS to rule them all, One OS to find
r/run, which is also designed to be cleaned upon boot.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fucking windows! Bring Bill Gates! (Southpark the movie)
/Filesystem_Hierarchy_Standard
/tmp
Temporary files (see also /var/tmp). Often not preserved between system reboots, and may be severely size restricted.
/var/tmp
Temporary files to be preserved between reboots.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
unless you used ssl certificate verification
Does the sec officer consider possibility of breaking into your postfix?
Is is so easy to break into your netework?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address
r[6755]: 49850456275B: removed
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything y
problem
with this is inability to remove existing x-original-to headers.
Privacy problem is addressed with smtpd_recipient_limit=1 but thats
not very feasible.
if you need this when delivering to LMTP, maybe this could be avoided by
setting _destination_recipient_limit=1
--
Matus UHLAR
901 - 1000 of 1318 matches
Mail list logo